e25dbfc529
`dnssec-keygen` uses `/dev/random` by default, but this is slow in some scenarios where `/dev/urandom` is both faster and provides sufficient utility. Allow override via the `bind::random_device` hiera key.